Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/B7oKCLtj5wVT7Rx672od7NSTVbM.roa
File: B7oKCLtj5wVT7Rx672od7NSTVbM.roa (raw, json)
Hash identifier: zBd0U1lEA6sR+ArBNpdCg/lk4ok0wNXK1hGjWgT7oxA=
Subject key identifier: 07:BA:0A:08:BB:63:E7:05:53:ED:1C:7A:EF:6A:1D:EC:D4:93:55:B3
Certificate issuer: /CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Certificate serial: 019424B38D4D708605E1E2FE1F02B61E2C23
Authority key identifier: 7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/B7oKCLtj5wVT7Rx672od7NSTVbM.roa
Signing time: Thu 02 Jan 2025 01:48:54 +0000
ROA not before: Thu 02 Jan 2025 01:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29080
IP address blocks: 195.68.200.0/23 maxlen: 23
195.68.200.0/24 maxlen: 24
195.68.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8d:4d:70:86:05:e1:e2:fe:1f:02:b6:1e:2c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Validity
Not Before: Jan 2 01:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07ba0a08bb63e70553ed1c7aef6a1decd49355b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e4:01:ec:07:f5:02:93:c2:80:84:67:1c:83:
69:c0:e5:00:2b:33:00:a7:bc:77:be:38:f1:dd:58:
e8:5d:b6:2e:80:84:31:79:ac:19:da:b1:36:f2:8e:
37:65:d1:60:3f:5e:c0:30:fb:b9:97:00:50:00:c3:
df:9c:46:71:90:54:2a:d6:e0:7d:1a:1c:c8:cd:7c:
7a:0d:f3:0a:35:66:f7:38:bb:a9:69:5f:ce:d8:00:
cc:b3:38:c4:24:26:d8:6d:5b:d3:15:4f:ed:7f:b7:
eb:95:0e:f7:1e:2a:f6:3c:ac:53:d9:4e:07:ab:74:
f5:05:8f:7c:c4:11:7f:97:0b:3c:ea:04:bb:16:68:
6b:79:2a:5b:53:ea:3c:fc:c0:4e:95:b1:34:ac:97:
a3:3f:08:be:42:e8:7a:be:28:f3:2f:ef:73:af:37:
9c:c3:37:34:fa:a3:77:7e:da:83:88:6a:dc:0a:8d:
36:2b:2e:6d:7e:0a:7b:c9:51:4d:d7:5a:f5:e3:08:
d2:d7:9c:70:65:f4:7e:47:44:1d:fd:fe:e7:17:13:
8c:9f:01:91:99:51:3f:77:95:1f:29:c7:18:6f:a5:
80:b9:b1:19:ec:d7:bf:7d:e6:55:39:b1:85:6a:f8:
16:48:c5:9c:2a:fa:45:d9:3d:39:b0:af:8e:03:22:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BA:0A:08:BB:63:E7:05:53:ED:1C:7A:EF:6A:1D:EC:D4:93:55:B3
X509v3 Authority Key Identifier:
keyid:7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/B7oKCLtj5wVT7Rx672od7NSTVbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.68.200.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:a2:1c:4a:c6:20:8a:7b:5a:fc:d6:e7:f5:75:27:b9:8f:80:
3a:18:96:91:b4:c9:d2:fa:e2:8d:05:ca:9e:58:df:ae:8b:d2:
a9:1c:18:01:17:28:9e:e8:fb:7f:db:27:69:2d:03:6a:f0:ba:
73:3e:13:76:1e:83:ce:f0:4b:c2:96:30:bf:6e:80:b5:e3:62:
bc:93:cb:1b:93:26:ae:28:32:68:7f:a0:e1:12:80:9a:78:62:
89:fd:fe:8d:d4:d2:d6:d8:47:e2:00:ce:f5:66:99:31:80:e0:
40:88:b0:09:49:8a:31:5c:46:01:12:62:9b:f4:78:58:d3:8d:
14:b2:be:76:5e:2a:99:bd:39:fd:c1:2c:3e:2a:fa:e5:7a:4c:
a6:cc:26:3f:f8:0a:40:49:3e:a8:ca:8f:85:4f:fa:30:6a:42:
b4:02:32:05:0f:7b:6c:53:dc:b9:cb:35:db:55:3f:9d:1a:74:
6d:05:b4:98:27:b9:32:7b:a7:18:7e:6e:b8:31:78:ed:8e:6d:
39:0a:e8:32:3c:77:e8:0b:ec:16:6c:7e:80:a3:43:e8:71:b5:
b1:17:4d:a6:1e:83:fa:eb:74:71:d0:80:c1:3f:92:3a:22:51:
b8:b6:39:6e:f3:3f:5b:0d:76:f2:4e:97:3c:b2:d3:e4:a2:d6:
66:07:69:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:30 2025 by rpki-client